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* b fc w Lrmm? z * -jwtzvsmtt -)\> 
m x a * *tfa*a x * cwfs-r s^iaa v A*m£u 

§€# B'ttSMI x b 43 J: $Sga x b K. ft JS"f 5 $Mt 

B©^avB*>p>v^^aKA.B«^)KUx sfl#Btt ;o 
i^ofi5tfaxBi:Sffi#Bo^BsavA*\e)Vx^aK 

B.A*fPfiEU C<DtZ, KA;B = KB.Atfj£fcU # 

c> Sffl^Atta^-^Sirfsa^a^Sff* 

K*fLTtt, -€-ne.<0Sffi#i:2lff#AHcD#VX^ 

*r=tts #^x^a*a«#A©a^a^6f^fi)tt 

*«#is*4*j*. v^^a^Etssnr^sfeoco 
^t«, «ffcfc4s#<o^wai:i»©«ffia^e.vx^ 
a^fm-rac**^ lettsn-tv^x^afctes 20 

«r-^®#{tak«:7>^AJCSt>\ Sffl#Bt©H 

T-«ii(c«wr-5^aBi^7';i/^'j XA*ffl^r, 
p zr-ZBsmm k KTBi#{t urcag^s: 

Ei(k : P) t. r-^Bg^tak^v^^jBKA.BC 
rtt#fl:tfttt*XEi(KA:B : k) *&m%B\cmm 

U §<i#Ba, T7.^aKB.A*ffl^TE2(KA.B ! 

k) a^x-^ag^taksra^ftu se-fcr-^Bi 

^ftak*fflVTEi (k ; P) *^^-^*XP*«^ 

[K««2] aa*y y7-*±T'*-j\><Dm%m%ft 

&3S^*-;HMS';*tA£43V"'T> SH#A*<S€ 

^Bjcwtrsm-rs^-^x^^fc-r^a?^-^ 

mm. x a 43 J: tftRgg x a KttB**4jia y a *fMt 
U §{|#B{4«5SfaxB43J:t/^ffiaxBfc^fC - r5^ 

A43£tfgfc#B«t#0 I DtiHHfc-fe^CBSU 

yAj=exp(a : XAj)(mod p) for 
■«WU yAi (j = l, -. n) «&fl*A.OftlMI 

sfl«B«, o<xBj<p-i *ssaxBj (j = i. 

yBj=exp(a : xBj)0nod p) for 
SrttllU ysj (j = 1, -. n) *sn#Bo^gsa 
tLTSSt (fc£U exp(a : x) tia^xSL-fdl 

^fi#A«, i#©igffia-e*sg»xAjfc£«#B© 

KA.B = n{exp(yBj : xAj) (mod 


*#A©I Dlff8lAfr&2£<I#Afc@W©fi®asA*\ 

S A=f (i a) , m\c&m*o\ Draft 

lB^P.§ffi#BICH*©*iSffiaSB*. SB=f(lB). 

T-ftfiEU -bV^ttiteSasAi: sAlcWfSr^^av 

(sa. va) «aMi#Aicie^»cE*u,naK: 


«5^aSBtSBtCW)S-rS^aVBOS (SB, VB) 

£§ft#B»C££££:fi5U COit, lA*lBfc?>tf 
sa*sb*Ova*vb. A<fi£3iU j£fl#AU: (yA, 

va) s^#b« (yB. yb) **n*ni»o» 
raifffstftesu vx^aoft^jasi: tr, aim 

#A«g#©$&8 (xa. sa) iSfl#BO^Ma 
(yB, vb) fre>VX*8KA.B*fMU Sffl#B« 

i^©ssa (xb. sb) tsft#B<D^?sa (yA, 

va) A^v^^aKB.A*f^fi8U C©fc*> Ka.b = 
Ki.»jW*4U fttes 2HI#A«*?*-rt/*iS<rr 

#AH©^x^a, £-7x*8*am#A© 

u ttaoa^-jwiaej&vT* r-zmmtms. 
sr©fc&*£^x*atf&g*i§£\ vx^a^fBis 
sttTv*t>0covvrtt, Sffctcffl^c^ati^ 

SfcLT, SftSAtix-^flf^kak^^^ACg 

dTUXA%fflV>T> y-;l/*^P«rr-^Hg#<bak»c 
TBt^ktfcHf^XEi (k I P) T-*W#{t8k 
*VX^aKA.BCTBS^tLfcBg#XE2(KA.B : k) 
*SfI#B KSflU S^#B«>>?X^aKB.A%ffl 

v>TE2(Ka.b ; k) frbT-zm&tMkZ&mt. 
Ls *6Kr-^ag^{bak*ffl^TEi(k ; P) *^ 

)5:-5a ; ?^-;l/ii<i->7.f L AtC43V>T, 2Hi#A)^Sffl 

* b ewLTasar s^-^i^na^t-rs®? 

<xAj<p-l *5SSlxAj(j ■= 1. n)*7>^ 

mn 

j = l, -. n, " (81) 
n) *7>^tcly*, 

n&2] 


j = l. -. n. 

[83] 

p) I J = 1 . 


- (82) 
(J-l. - 


n) 


n).*ffl^T, 


(3) 
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iCTffrSU 

&H88T?£SyAj ( j = 1 . -■ n) *fflf->T, * 
KB.A = n{exp(y*j : xbj) (mod 

Sa, Ztclt, &ft#AOiM&R-?&«n&x«j ( j = 
1. n) £K£rtHKefr5. 
DK°5] K (A) -0(xai. -, X»n) . 

C(A) =Ea(K(A) ! Sa) , 

* , E««*tTV'>5 fcOtOVTtt* grfclcf§#©&ra8 

?nrvS^X^SI«:«?Cti:L (fcffU Ea ( k ; 

M) ttA^mfif-T5«5ffiSI«l^77l/drUXAlc:j;!3¥X 20 

iP^x-^^fkSlklcT^bLfc^XECk ; 
P) 'fc. -r-^^bSik^TX^ilKA.BtCT^^t 
Lf=Hf^XE(KA.B ; k) t^-Jl/gflraBJcaSfflU 
£##Btt, ^X^aKB.A^ffll^TEdCA.B ; k) 
e>x-*B§4ff|;Slk*«^{t:U SBtex-^WrefUl 
k^TEtk; P) *»6^-^**P*«^tr* 50 

^fflatbT. MtScpii:. p 2 -i^z:o 

't*4iBIU p2-l©JRHS##*HHBi:U &€#A 

tt, 0<XA< P 1-l%5g»XA*7>^(C^t>\ 

[SSt6] yA=exp(ai : xa) (mod pi) , 40 

g<I#Bfcj\ 0<xB<pi-l*S^§5xB^r5>^A 

CSSt 7 3 yB=exp(ai : xb) (mod pi) , 
ZitML (fcfSU exp(a : x) ti a £ x * Lfcfl** 

A©IDlf^lA*^, Ia+ 1a (mod P 2- 1) ATO 

fro, Ia* lB&6(f Ia+ 1a (mod P 2-l) 50 


♦8Kb. a*, 
[»4] 

p) | j = 1. n} . 
*lB+iB (modp2-l) £%2>& : ?iCiE&8. ii%M 

[&8] sA=exp(lA+ iA : 1/2) (modp2-l), 
KTttWU n»CS«#BOI Dlf«lB^P>, jgfl! 
#B£@W©i#S58sB*\ 

[»9] sB=exp(lB+ iB : 1/2) (modp2-l). 
tTH-HLv #««:Sm#AfeJ;tfSM#BCg^cE 

B&10] vA=exp(a2 : sa) (mod p2) . 

t<om. (yA. va) z&m%koy£mmtLTmmu 

g<I#B«yBfc. WtimsilcMfStSQBm 
[^11] vB=exp(a2 : sb) (.mod p2) . 
£<om (yB, vb) £g##BOiN18i:UTggU 

(xa, sa) &9fi#BO&flMrP$« (yB, vb) *> 
6, t7.^8Ka.b*. 

[&12] KA.B = g(exp(yB : xA)(mod pi) , exp 
(vb : sa) (mod p2) ). 

KTffrjgU g<I#Btt, &#<D%!&mr*&?> (xb, 
sb) i:iM€#A©^aT'*5 (yA, va) 

[S13] K b . a = g (exp ( y a • xb) (mod pi) . exp 
(va : sb) (mod p2) ), 

c©t#, ka.b=kb.a*^4u mm^Aim 

6 t £H# A F4©&^* * R*> 6 * 5 

Sa. &{I#A©*&S&8 (xa, sa) t»&M 

[&14] K(A) =0 (xa, sa) . 
ICTttrtVfcmK (A) tl^TTX>i^S«*i 

[SS15] C(A) =Ea(K(A) : Sa) . 

tg^©^^?)TX^ii^fi!(;-rsct^<, lets 
snTV*v**«*fle5i:i:i:L (fcfcX, Ea ( k ; 

m) « a jraf»r-*a«Mie#7;i/ J y xak a »? ¥A 

M^ak(CTBg^kUfc^m*St>-r. ) , 
35rp^f-^Bt#{kakfCTBg^bbfe©^*E(k : 
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(4) 

p) T-*®mmkzvx*mK*.Bi,cTt%mt 

LfcW^IXEdu.B ; k) £*-;i/£ffi#Bfc:2HIU 
S«#B«, V7.*&KB.A*fflvtE (Ka.b ; k) 

k*fflv>TE(k ; P) *6y-/b*3fcP««^1"* 

ansa 5] mm*y hv-trfet-Mmsmfi 

©*#*IIS»*BafcLT#ofg&p2i:> 8»ai, a 
[&16] yA=exp(ai : xa) (mod pi) , 

fctf-gu git#B«, o<xe<pi- i«*esstxe 

DK17] yB=exp(ar: xb) (mod pi) , 
fcftSU -b>^^oa»fflaf:tTx &{I#A*5<J:tf 

«2f«#A<OI D1MBTa*»S» JM«SA»C@#©«HB 
SsA%iEae*m^Ts 

[Sf18] sa=oxp(Ia : e) (mod p2-l) . 
KTIWU PWIC»i#BOt D1IMBIb*»6, SMI 
# B fCHWOSSffia s b *IE8 e VT* 

[&19] sB=exp(lB : e) (mod p2^ 1) , 
KTIWU £4*&<I:gA*5 < }:tf§<I#BfC££H:E 
*)TL OitiXs. exp(a : x) « afcx^Lfdlfc^fc 
T) . 

CKDfct, I DlS?fi#K*ftff#£'f *«BBafeS4 30 
9, 2&«#Att'yAfc. SHMIsAlcWJS-rSiiBaa 
DK20] vA=exp(a2 : sa) (mod p2) .'• 

<om (yA, va) *mm%A<o£fflmtLTmL. § 

[&21] vB=exp(a2 : sb) (mod p2) , 
<om (yB, vb) *gm%B<D£fflm£LT&®L, T 

(xa, sa) tWUXBOtomtV** (yB, vb) 

e>, tx^ska.b*, 40 

[$22] K a , b = g (exp ( y b : xA)(mod pi), exp 
(vb : sa) (mod p2)) , 

CTfMtU 3»l*Btt, itfO&^aT'&S (xb, 

sb) tmmwjimmx'&z (yA, va) 

T> TX^SKb.a*, 

[&23] Kb.a= g (exp(yA : xsJOnod pi), exp 
(va : sb) (mod p2) ), 

KTfMtU COit, Ka.b = Kb.ajM5*:£U 

Sfi#A«il?^-^*Sffi-r5«^*^^SfI 

#icwtT(i, *-ne>©s<i#fca5<!#Afig©&-?x* 50 
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a*^%5*^SA, Sfctt, £«£A©8«a (xa. 
sa) '.fcft£j*Hft0*&, 
[S24] K (A) =0(xa. sa) . 
KTffJ«bfc«K (A) «»t^Ty^**0«ftSA*» 

[S25] C(A) =Ea(K(A) I Sa) , 

tfEfisnrvs feocovT.ii. »rftK*§#o^B8a 

tg#©«^a*^X*a*ft#?-SCfc*<. E£ 
sniv-5vx*a£{£?<:4:i:t (fc^U Ea (k ! 

m) ti a wffit simmr^ u xak * 0 
M*ak»cTBi#fkLrcies**t)'r) , 

m^ftakfc^^.Mcjltfv S«#Bi:©fflT?«iiC 

swi-s&ffiaBafisr/i'^'JXAfcE^T, 
X P *T-*«#fta k KTm^itLrzmmz E ( k ; 

P) T-^SI^bak^vX^aKA.BfCTBf^k 
LfcBS*£E(KA.B ; k) BKitHIU 
£H#B«\ TX^aKB.A*fflV>TE(KA.e ; k) 

k«ffl^TE(.k ; p) ^6^-;V2feS:P*a#{b-rs 

* B K*t t TSUif S P< -;VX«rBf#{fr ^->b 
«#(£**£-?<& oT, iHMMfcUT, fk®. 
pi£j£8n = pi -p2fcg»a%^g8U ntDSISBSt 
#8?i:IE8a£l&&fcU 3<t#Att, 0<XA<p- 

1 %SS»XA«-7>^C^tf, 

[St26] yA=exp(a : xa) (mod p) , 
*lt)?U §(t#Btt> 0<xB<p-lfc5S8CxB£ 

[&27] yB=exp(a : xb) (mod p) , 

ttS€#A©I DlfffllA*^, Ia+ iAdiiod l.c.dCp 
.-1. P 2-l) )#¥#«&, fro, lA*lB%e,{f 
. Ia + i a (mod l.c.dCpt - 1 . p2 - 1) ) * Ib + Ib 
(mod l.c.d(pi- 1. p2-D ) fc%S<fc3tcIESS( 
iA*St>\ 2Hi#AC@W©a (sa, va) 
[S28] SA=exp(lA+ 1a : 1/2) (mod l.c:d(pi- 
1 , p2- 1 ) ) . 
vA=exp(a : sa) (mod n) , 
KTftJIU P«KS«#B©I Dmmi*fr<Z>. Sffl 
#B(C@#©a (sb. vb) 
[»29] ss=exp(lB+iB :T/2) (mod l.c.d(pi - 
1, p2-l) ) , 
VB=exp(a : sb) (mod n) , 
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; 

flit (teJSU exp(a : x) «a*x*Lfcffi*«t> 

ifA»(y.«. v»)*33MMf AOfcllMi: LTgfiU 
§ffi#Bti (ye, vb) *§fl#B©£HS!&i: LTS» 

u ^x^a^&siLT, 

ffl^T, £#<D®®mV&Z (xa, sa) tSfl#B© 
&0BSrz?&3 (ye, vb) -7X*8Ka.b«\ 
[830] KA.B=g (exp(ys : xA)(mod p). exp(vs : 
sa) (mod n) ), 

GTffrSU 3ft#BU\ £#<DW®m?&Z (.xb. 
sb) fc&#SA©&i«rea&5 (yA, va) *fflV>T 

VX*8KB.A«\ 

[831] KB.A = g (exp(yA : xB)(mod p), exp(vA : 
sb) (mod n) ), 

ETMU COit, Ka.6 = Kb.a#j££U 

s(i#a as?* s«#!b<£^§<i#£*r 
LTti. *necos<g#t^«#Afs<o^x^a*>e 
*s*^sa, $ fcit, mm%A<DU®m (xa, sa) 

[832] K(A) -e(xA. sa) . 
£TfMtLfc8K(A) *ffl^T7X*8<D&£SAfcl© 

*§{btfc 

[833] C(A) =Ea(K(A) I Sa) , 

fb8MSr®fca*£?'?x*8a<£fifc#&s tx*8 
tfKSSftTVS fc©»cov>Tfcl\ Jrfcfcffl#©iMlfl8 

i:i^©a^a^e.vx^««rf^-r*cfc*<, saw 

£nTV>£^X*8££5CfcfcL (fcfcU Ea (k ; 
M) i}Atfmm%W£W%W7tl<JVXl*\Ci:*)¥$l 

P) t> T-^Bg^fkak*-7X^aKA:BfCTBgf{b 

l/£^S:e(Ka.b .; k) *^-;vSft#B(c^<lU 

§fi#B(i, VX^aKB.A«fflVTE(KA.B ; k) if 

e>T-*Bi#{b®k*«^{bU setcx-^Bf^fbSi 
k*fflVTE(k ; P) iftbt-frttPlkfemt? 5 

#B»c»tT2iffl-r.5^--'i/S:*is#<b-r5mT : ^-^ 

iPWfflattT, £8pi:£j«8n = pi-p 

2tg8a£&B!U ncDSgB8#8?iIE8a*«Sffii: 

Us &ffi#A«, 0<XA<p-l*§SI!jXA%7>^ 
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[834] yA=exp(a : xa) (mod p) . 
fcW-gUSfi#B«, 0<XB<p-l&£g»XB& 

[835] ys=exp(a : xb) (mod p) , 
*tWU •fey^Og^&giLT, 55lffl#A*<J:Cf 
§ffi#BU\ i#<D I Dl»$8*vb:/*lCgg!U -fe># 
&JM<1#A<DI DIS^BIa*^* 5H«#AtC@*<0a 

(sa, va) fclE&e^ffl^T, 

[836] sA=exp(lA:e) (mod l.c.d(pi-l. p2 
70 - 1 ) ) , 

vA=exp(a : sa) (mod n) , 

KTiWU |B|«K£ffl=f B© I DUNS I B*>e>> £f§ 

#B»C@*©ji (sb, vb) *, 

[837] sB=exp(lB:e) (mod l.c.d(pi - 1 . pj 
-1) ) , 

vB=exp(a : sb) (mod n) , 

CTtWW S^*^#Ate*tfSfl#BtC^cE 

1$L (fcfcU exp(a : x) ttafcxftLfdilfcSfc 

t) , c©tt, i Dif«A««*ntf»ic-r5S5ffiafc 

20 m^*). S<1#A{4 (yA. va) *2HI#A©£KJ8fc 
LTSSU g«#B« (ys. vb) £§{f#B©&l8J 

a. §^#Bt©HT?«iHc«*-rsHag%fflv^T, 

g^OK^a-efeS (xa, sa) t£fI#B<D&l?SI8T 
$5 (ys, vb) TX^aKA.B*, 
[8383 Ka. b = g (exp(y b • xA)(mod p) , exp 
(vb : sa) (mod n) ), 

KTflFfiEU §ft#B«, &#<DimmT-&Z (xb, 

sb) t^#A<D^raar*fes (y_», va) zm^r 

30 vX^BKi.*^ 

[839] KB.A=g (exp(yA : xB)(mod p) . exp 
(va : sb) (mod n) ), 

fcTf&SU C<0££* Ka,b = Kb.a#J5Jc31U 

ltu. ^ne>o§fl#ts«€A(a<D«vx^a^e. 
*5«^sa, $/-c«, mmgAommm. (x», sa) 
2:8£fi£Bi8efr5> 

[840] K (A) = 0 (xa, sa) , 

CTffriScU'c8K(A) *ffll^T^X^a©«^SA«:B 

[841] C(A) =Ea(K (A) I Sa) , 

{baSSr©fci6*HT'V7.^«A^>S*Ji^ vx^S 

i:i^<DSKfBa^e.vx^a«r^fi£-r«ci:*<, ffitl 
snTV>S^x^a*ffi?ci:i:t (fc/£U EA(k : 

m) &Ammz®®m^7>\>3 x )Xi±K&')¥--z 

M*akCTB|#{btfc^m«:«t>-r) ^ 
^-;l/*i<DBga^{b«iatLT, M^Ait. r-f 

so mmtmv.*?>?2*icmv. sm#Bi:<DMT-«jit 
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3tP*r-^«^kakfcTW^i:i,fc^iE(k ; 

P) fc, x-^Bg^jtSik^^^aKA.BtCT^t 
UfcBg^XE(K».B ; k) *p<-/V§ffi#B{C^fiU 
Sffi#Bti, •7X^aKe.A*^l/''TE(KA.B ; k) *^ 
S-f-^Bg^fkakSra^fkU ££>lcr-*Bg*f{ka 
k£ffl^TE(k ; P) fr$*-Jl<*XPZmittZ 

% b cat tramf 5 * ^k-r se? * 

Hg^fk^ffiT-fcoT, 

*IMU!!yii:LT, SStSpi. pt&ffiRai, 

a2*&MU £J3fcgZ/(p2-l) <07t*mtl-t&®& 
SmmTA'dV Xi»fe«tt/8lr %8SSB1t$8£L- (-tr>* 

M*HkT*e^l:Lfc^*Eo(k : M) TSfcT) , 
Sm^Afi, 0<xA<pi- 1 *5§iSJxA*7>^A 

D&42] yA=exp(ai : xa) (mod pi) , 

*ft»U Sffi#B«> 0<XB<pi-l*5S»XB 

B&43] yB=exp(ai : xb) (n»d pi) , 
£it*L (fcfcU exp(a : x) tta*x*tfcffl*S 
fof ) . ' 

A O I D mm I a S> A £ BffftiMM s a 

[S44] s a = E b ( r : I a) . 
'fcTffWU W*K»i#B©I DflWilB*»6» Sffi 
# BES^rOiB&asB^ 

G&45J sB=Eo(r ; Ib) . 

KTtffltU S^*Sm#A*5.tt/§<l#BtcS±»i:E 

a. 

[$t46] vA=exp(a2 : sa) (mod p2) . 
<01& (yA. va) «3S«#A04MH«i:LTa»b. § 
<§#B«, yBt, «5flBasB»<:^f5-r5UM» 

[Sx47] vB=exp(a2 : sb) (mod p2) . 
©a(y».. vB)*Sfi#B<O^WafcLTaSL, 

*a©#*r»si:LT» 

3MI#Att, »i*BfcOMT«aK««1-*M»g* 
ffl^T, i»©fiSffiaT'feS (xa, sa) i:S«#B© 

4inaaT*s (yB. vb) ^e, vx^aKA.B^ 

[SM8J KA.B=g (exp(yB : XA)(mod pi), exp 
(vb sa) (mod p2)) . 

KTft&Ls »i*Btt;"a»oi««i-e** (xb, 

sb) i&fi#A©lN?fMrc*«&.5 (yA, va) fcfflt^ 
T, ■TT.^aKB.A*, 
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' HM9] Kb, a = g (exp(y a t xb) (mod pi), exp 
(va : sb) (mod p2)) , 

KTf&SU COtt, Ka.B = Kb.A*WSU 

. asaaAtta^y-^aarsa^^v^ifflaKW 

£3£|£Sa, £fcti\ SS^f A©8HBa (xa, sa) 

[f£50] K (A) =0 (xa, sa) . 
lcTfffi£LfcaK (A) «rfflV\TvX^ao«"&SA^ 

E&51] CCA) =Ea(K(A) ; Sa) . 

fci»©IMSa*»6 , ?X*«*ffjjW-*J:-fcft<. KM 
$tlX^&vX*m*m5CttL (tZt£U EA(k: 

m) aA*^-r5«®a^7;^'JXAtc«tD¥S: 

M%aklCTI£#{kLfc*S*«:g*>-f) .> . ' . 

XP*T-^ai#fbakfcTai^ttfc^XE(k ; 

P) fc, r-^^kak^r^^aKA.BCT^k 
Lrc«^XE(KA.B : k) *>«->HMiaBfcaMIU 
§<I#Btf\ VT^aKB.AfcffllATEdCA.B : k) A % 
e>T-*Bg#{kak£&<f{kU S e>K-r-*Bg*f<ka 
k^TEfk I P) PJfcfltefcfS . 

a b KttLT stars *-;i/£*Bg^<kf am?*-;!/ 

Bg^fk^ffiT-SoT, JPffifi&Si: IT, ^» 
pt^figSn = pi- P 2tgSta«:^L, g»a43«fc 
tf*JjSW»Z/(N) <D7i*mtltZ®&$m^T}l=IV X 
L.is&Zfmr*W®mm£L (fc^t, N = l.c.d(pi 
- 1 . P 2- 1 ) T-fet), •fe>^©^1f^T*$.5SSS6 
aHf^7;l/^ U XAK J; 0 ¥*M^a k T-Bg^fk Lfcig 
*^Eo(k ; M) T'Sfr-r) v ; 
SfI#A(i, 0<xa< P - l*SS^xA^^>^Ak: 

at?; 

H&52] yA=exp(a : xa) (mod p) . 
£tmU §<l#B(i, 0<XB<pi- 1 ^Sg^CxB 

y6=exp(a : xb) (rood p) , 

£fi£B«, s^©i Da«**>*te«aL,- -bv^ 

«S«#A<D I D1S« I a*P,S<1#A jc@*oa 
(sa, va) €\ 
CS54] SA=Eo(r I Ia) , 
vA=exp(o : sa) (mod n) , 
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KTHWU HSHcSttgBOI Dtifffi I b 

BtcasoacsB. vb) 

[?S55] S B=Eo(r ; Ib) , 
vB=exp(a : sb) (mod n) , 

t>> iH«#A« (yA, va) £Mft#A<DlNlfl8iLT 
SSU SflSBti (yB. vb) £§fi#B<0!^8i: 

ffi^T, i#©$SS«T-;&£ (xa. sa) fcSm^B© 
&HSaT£S (yB. vb) frf>, TX^SKA.Bfc, 
B&563 KA.B=g(exp(yB : xA)(mod p), exp(vB : 
sa) (mod n)) . 

KTfftfiU §{I#BH\ i»cD«5ffiaT'feS (xi. 
sb) tm@%A<0£&imT~&Z> (yA. va) ZM^X 

B&573 Kb. a = g (exp(y a : xB)(mod p), exp(vA : 
sb) (mod n)) . 

KTfftSU C(Dtt> KA.B = KB.A* < fi£fiU ftE, 

%5*^Sa, £fc«, J^m#A<0«S€-a (xa. sa) 

B&583 K(A) =0(xa, sa) . 
KTfftSLfcSK (A) «rfflC>TV7.^a©*^SA^Bg 

B&59] C(A) =Ea(K(A) ; Sa) . 

**Ett**vtvs fetoKovra, *rfcfc*i#<o&iJMi 
ti^©8HBa^e.^x^a*^«-r5ci:*<, tee 
■$nT^z-?zzm%&5ctt i, (.refill ea ( k ; . 
m) a Aimer zw®w«47>i<3vXLK&*)¥ic 

M^akKTBI^ffcLfcSSIIIfcgfc-fK 

Bg^fta k * 5 >^A»cat;, b t ©m?#ae 

iP*r-?.ffi#fkakCTfl|#{bL/S:Bg^5E(k ; 
P) t,.T-^B&^bBk*TX^aKA.BK:T^t 
LfcB|^E(KA.B : k) **-/l/g<l#Blc&<IU 
SM#B«, t^^BKb.a^TE (Ka.b ; k) *» 

e>T-*B|#{l:8k U S6te7 , -*»^UI 
k*ffl^TE(k ; P) ^&y-^*AP*a*<fr5 

G&60] g(xi. X2) =h(0(xi. xz) ) , 


(7) ^¥8-2 5 1 1 5 6 
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[&613 0 : Z/(p) xz/(n) -> Z/(pn) 
( (x, x) -> x) . 

4*BSMP«*«t>U Z/(m) ttMfcm*ffii:tSfl 
£gt££fcU xti*n^n©£J£JIC*S^Tx*ttS 

m«9(l 1] »^4, 5, 6, 7, 8$fcti:9tCfc 

/0 OHTftjitC^W-rSBiSgtUT^ 
B&623 g(xi. X2) =h(xt*xj) . 

(ftei, hli/vyS/aM*, xi* 
x 2 x i i: x 2 (DgfffiWitJIfcfcSfc-f ) > ^x*®* 

23 Htt&*3, 4, 5, 6, 7, 8, 9*fc 

W^fkjlk^^^^^tcSt;, §{g#B fc©F3T?«Sfc 

20 XP«r7 f -^Bg^{dBktCTB^(bt/'cBi#3SCE (k ; 
P) T-^Bg^fkSlk tvX^aKA.BiDSfffiWiS 
afOk*KA.B*SM#BtcSML, S##Btt, VX 

^sikb. At k * ka. B<mwtmwia*tR : s>-z t^z 

Sik£ffll/»TE(k : P) frt>*-)\>*$LP*13. ! %it-t 

msai 33 a«*y h7-*±iw-->i<©»»i* 

fTfcSm^-^il^Xx.UCfc^Ts 2M#Atf§ 
©E««f*A*ffll^TV flt&g'l A^W*^ 1 2<OS? 

ssfli#*^ai5nT*fcaiffl**tw«2^6S 
t-x- ^ Bg^<h:g43 <fc tf^ xttmmtr %> c t z 

[oooi3 

T, * y h 7- ^±T'OJ5® WIE#tc J; 5 % D f $ b 
[0 0 0 23 

l®3k<K>&Wl lnternettt3tt5tt?^-;KD-tr*a D 
50 T-C^ffc-TSilt^SWtLT, ZM TLinn.J.. et 
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al., "Privacy Enhancement for Internet Electronic 
Mail:Part I, II. III. IV" .RFC-1 421 -1424. 1993J IC 

f2ic£>PEM (Privacy Enhanced Mai I) fr}f^£4vt 

[0 0 0 31 PEMm BMfc&HWWfrSA 
(##£$5 rR.L RivestA.Shamir,LAdleman. "A Meth 
od for Obtaining Digital Signatures and Public Key 
Cryptosystems" . Conmuni cat ions of the ACM. Vol. 21.1 

978j) *«fflu ?-*v>vtQQacxsm*w»'vibi 

HMMMWDES TData Encrypt ionStandar 

d.FIPS-PUB-46,1977j ) fcffll^Tl^So 
[0 0 0 4] 3S«#Att£ffl#Bfc*-y h7-**rftb 

[0 0 0 5] Step 1. Att«r-*«^{taK*5>^ 
[0006] 

[&63] Ci = E(K ; P) . 

[0007] Step 2. AttB<D&KMr(eB, iib) £ 
[0008] 

[&64] C2=exp(K : eB) (mod na) . 
£*f£ 0 fcfcU exp(a : x) tta*x#Lfc«t*ato 

[0 0 0 9] Step 3. Att^-;V*iP*»BBfl»ll^ 

4jH«nA*fli^Tf (P) KRS A***Sa'5o- Tft 50 

f (p) fe»-r*»**sgiu.(p) 

[0010] 

[»65] sgrw(P) =exp(f (P) : cJa) (mod n*) , 
[0 0 1 1] Step 4. AttCi. -Ci. sgru(P) *Bfc 
[0 0 12] Step 5. Btti»OJMBiiidB*fflt^T, 
[00 13] 

GS66] K=exp(C2 : de) (mod ob) , 40 

[0 0 14] Step 6. Bli«K*ffl^T, 
[0015] 

[»67] P = D(K ; CO , 
Ci-O, *-/l>»P«»"ffr«.. 

[0 0 16] Step 7. Btt*-/b**PtfAfr&JB& 
ftT#ftCt*»«>*ftft, A-r>a«f 4:A<DiiM 
£| (eA. ha) SrffiV>t\ 

[00 17] 

[JS68] f (P) =exp(sgru(P) : eA). (mod ru) , 50 


(8) «kW8-.25 1 i 56 

[0 0 18] PEMk:H:3KORIHjS« t #*6n*o- 
[0 0 19] (1) «±ttOfi«^6, f-*f|tfti 

K i 5 St 1 t ^ * WHItt*W«ft: L 5> 4 tttitf . 
^i§£ N RSAW*tt«#fkOfc»©ttMtfJt««* 
J§fr*tv\ 

[0 0 2 0] (2) RSAW*»^fcWSa8T?tt^ * 
m&to\ ZOfcti). PEMm RSA*ffll>ftf-f 

LfrU ^^>;«*ttft*fcWEOfc»oiW«i 

[002 1] (3) PEMW^ *.yh7-*© 

Us mm%A±mm*B'<b*ifir-&LT^z£tiic. a 

*BOaH«fr6«!Wsr<i:, Att'BlcftO-rSLfc 
[002 2] 

t^T*ii#0^-^i:«fffl^#*Wpa*^t, fro, 
fro, f«Jffl#^g^-^C)^Efr*v^K J ^ ; T ; iE#<04 
[0 0 2 3] 

[0 0 2 4] Rf*«S63a»ttO 1 OtLT«, gfl^A 

#Sffl* b » l rasflrrs * -;i/**«Mt ft* * 

•fe>*tt. *«pk^J«ftn = pi-p2i:B[»a*4illB 
U nO*HSk»«i:iafco*«B«.i:r*. 

[0 0 2 5] aS«#Attv. 0<x*<p-lft*»»XA-. 

[0 0 2 6] 
- [ft69] yA=exp(a : xa) (mod.p) , 


(9) 

fcffJfU §ft#B«\ 0<xB<p-l*5gaxB* . 
[0 0 2 7] 

[fit70] ys=exp(a : xb) (mod p) . 
£ftWf5. fztiU exp(a : x),«a?;xSLftl«; 

[0 0 2 8] ©-t^^^Og^fflS 

§gL, -feV^ttssd^AOI Dlf?8lAfr?K 
AfcH*oa-(sA. va) *IESe*Jfitf->T, /0 
[0 0 2 9] 

[iifll] sA=exp(lA : e) (mod l.c.d(pi- 1, pi 
— 1) ).. 

vA=exp(a : sa) (mod n) , 
JCTttJFU BI*WCSMI#BOI DflMiIi*»6, «ft 
#B»C@^©a (SB, VB) *, 
[0030] 

[$St72] sB=exp<lB : e) (mod l.c.d(pi- 1 . pt 
-1) ) . 

vB=exp(a : sb) (mod n) . 20 
CTIWU &4*&<I#A43<i:tf£<I#B»;:££»cE 
ffifSo ftflSU-1. c. d (x, y) tt»»x, y© 
a/MHSBteatoT. 
[0 0 3 1 ] COfct, I DilHWR*ntf»iS-r*8 

[0 0 3 2] 2HI#Att (yA, va) *2H1£A0& 
WafcLTSaU S€#Btt (y«. vb) *gfI#B 

[0 0 3 3] <3>TX2a#Wias 
mm ah. %a%Bt<omT-PiMi,cmtz$B&gz 30 
m^r. i#<o«ffia-ea&s (xa, sa) t§M#B(o 

4iBBjlTa5S (ys. vb) A>5, TX^aKA.B^ 
[0 0 3 4] 

[S73] Ka. b = g (exp(y b : xA)0nod p). exp(vs : 
sa) (mod n)) , 

KTfWU gmmBli, &ft<DW&®X'&% (xb. 

sb) tmmgAWfflm-c&z (yA, va) %m^x 

vX^SIKb.a^ 
[0 0 3 5] 

[S74] K b . a = g (exp ( y a : xb) (mod p) . exp 40 
(va : sb) (mod n)) , 

[0 0 3 6] CtOtt. KA.B=KB.A#fi)c£-f -So 

[0037] wc» a«#Att«?^-/i/*3aHi"r*«' . 
a^a (xa, sa) ta^^Bsae*^, 

[0038] 

[&75] K (A) =6(XA. sa) . 

(CTflFfiScL/cSiK (A) *fflloT-7X*a<0*£S»*«. 50 
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[0039] 

[&76] C(A) =Ea(K(A) ; Sa) , 

ftasfrcfcfcftHT-vx^si^iesft^ vx#a 

tfEt§£tttv?> 'tOKovTtt, Srfttcffi¥<D^^a 

ta#0$£a*^vx*a*ft$r e« 

^nrv^-vx^n^do fcTSU Ea ( k ;m) »A 
[00 40]®^ -;i/*3S:oBga#fki!ia 
£fflv>T* *-/l>*:£P*T-*Bi^fcaktcTI«^{l; 

tf=ng*a:E(k ; p) x-^W^ffcakfc-rx* 

aKA.B»CTBf#{tL/'cHi#3!:E(KA.B I k) Zt-fr 
§«#B»C^#-T5. 

[0 0 4 1] Sd^Bfi, VX*aKB.A«:ffl^TE(K 
a.b ;. k) *&7*-*WMaik*l»fl:U 2e>K-f 
-^©#(tak%ffll/>TE(k ; P) *»6^-7l/**P' 

[0042] 

[ftffl] $?£W»c&tt3m?*->W#{t:#£-eii, * 

i:ffi#©4i^a*^^x^ao«w^fT*v\ s^ara 
.^«-ffl^T^-;i/*3Sc©^#(kfe<fctf7 :f -^Bg#{t:a© 

■ oasa«*35DSroiMi««ii.'a*iwiiib» 

**aLfc> ®iz> mfnic*->immitfi%?m&z-o 
^T«ait^tbT-7x^ao*«:iafitT*3ittfs § 
«*©i«ia«!>i«fc4<, x-^Bg#fta©s 
^©a£vx*a©£)fr&fTfc5'#gfc*<> S5)i*Bg 

[0 0 4 3] I Dffiffttfta* 

[00 4 4] 

[00 4 5101 «\ *«WOaM«OS'^f-ix«** 

ioot-b>^nig@2ooi:*>e«fiitsnT^s<, fufflaa 

gHlOO«SV«tC3i«lHl^300^bT«^nT^So 
[0 0 4 6] 02fi> *«WKi8»**«?^->MM<fc 

[0 0 4 7] B3& 1 >6.9Kl8»**«ffl#ll 
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(10) ®M¥8-2 5 1156 

17 1* 
£8§10K ^fS»S102, g£j5E8§103, iS»8g104, « ♦tttTCBBBKfcVTBL <BMW*. 
*9fc»B106, /NyS'aMWKft. **'J107, !M [0 0 5 3] Z»SAB*«bb. Z/diVttfiftn* 

[0 0 4 8] Bid. *V*««H2M®rt»««*jR (n) (*»*W*ta*. xeZfcttl/C, xtittfSfS 

t. ■b>*«««200tt, brb£S2ok BMB&gB «wie*Jt*x*f«bt&r*«*«**fe"«". * 

202, 8HBBffcS8B203, iftgg§204;&iIAT<,->5. fc, exp(a : x) {iafcxBLfcffifcabfo 

[0 0 4 9] 0 5 «; *-.K«0iOrt«M»»*. * [0 0 5 4] _*y K7-*©«ffi«© I .DlWWi^T 

-F400(i, aft«48840U ^Ifil3l8§402, @t£f£Sg4 t >«TT?£fc2tt31§^ I DfilffitiZ 

03, if§l?8§404, Bg«*§{tgfi405, /^atrJHMO /(exp(2 : t) -1) (D7ct%z.ZC fctfT'tSo CO 

6, **';407, ffi^SB408%«i^TV>3 o 70 ?ijffl#© I D«&©*£A£, A = Z/(exp(2 : 

[00 50] 0614, Bttftl 0fc*Jtf*flJBB«BB t ) - 1 ) fcfcBT*. 

GoooAMMtt^r. mbbbbbsoob* *-fkw [0055] c^ssfiw 1 

SB50U i§mgB502*{S*.T^*. 
[00 5 1)^7 h7-*0«H#ttaBHBK:»»* *y + 7-*©#«JIBAtt*ft*ftS*©»fflB«B 

ftfci#©*JH#«BBioo (.ii-vmtmmmms ■iobfloajWKfe»ioT**tf^««wiio2*fflv^T 

500) *fflV>T.flfiOiPJffl#fil«B100 (*- K400t|ijffl 3K©B«*fMU fiim©#*£B • gg"f£, 

#«««500) *««"r*»J©fyffl#C»bT«?^- [0 0 5 6] IHBB: 

/l/MMtfrftS [0 0 5 7] 

[0 0 5 2] COt *?^«->W!>«^fl3ErffifcOV-»* [St77] 

• xijSZ s.t 0<xu<p-l for j = l. n. 
fiMi: *t»78] 

[00 58] - .* 

• y x j=exp(a : xu) (mod p) for j = 1 . • -. n. 

1, — , n) , 

[006 5] 

[881] Ka.b = Kb.a. 

[0 0 6 6] $e>tc v A»B?*T-/i'*2tflr*-*«f?# 

*8©*£Sa, tfctt, AO«5ffi1f»xAj (J = 1 . 
-. n) *>6Wffl#WSfi100ArtOa4ks103AtC*»3 
SK(A) fcf&SU «tt^k««105A*»V"»T«K 

(a) K&KtsiZBsmtLrz 

[0067] 

[882] C(A) =E(K(A) ; Sa) , 

^*uio7Afc8B« , r*. mk<DH : ?-*-)vmm\ct5 

v**«#feB;*ftTlv5fe©£O^TH\ St 

s c t < , * * u i 07ACEH* nru > s^x^ »*flg 

[0068]®* -;i/*XOBS#<k 
A I4v «ffl#«»B100ArtoajW84»101A*fflV^Ta 
a r *SD\ r £A*> t LTBffeBBKBA^S^-^B. 

mmkztt&tz* ^-^*XP*BiWkSBio5A 

[0 0 6 9] 

[883] Ci = E(k ; P) . 

-10- 


fcfcL* p liXR, a It 0 < a < p T* Z / ( p ) ©iS^ffi 

e>no->5 t»© t -r^o 

[0 0 5 9] h7-^K«8t**lfcf!lfflS 

tlgBioorticttiBi-<o«^aBi#^7;v=fy XAfcfl 

dry Xi»*B^T¥*M«^TW9ffc-Lfc*S»*J:tf 50 
tt^tLfd^fc^tvfnE (K ; M) . D (K ; M) T 

[0 0 6 0] ©VX*g©#W 
*>y h7-*©*Jffl#?fc.5A. B1COI,>T, AttBK 
ML,Tif^-/^S!)ft^. A, B 

{i#©#l(S*fSf7'tS. 

[00 6 1] AttAOfUBBBBBIOOArtO^tBJHi 
102A*3<J:tfillS[Sg104A^»^Tg^OffiSgSxAj £ B© 
fiMByej. (j = 1. -. n) fr6vx?iKAj5:, 
[0 0 6 2] 40 
[&79] KA.B = n{exp(yBj : xaj) (mod p) I j = 
1, ■ -. nl , 

icrftwrs. ft«u la^iooA^ic^^Tfi, a?© 

[0 0 6 3] WBKLT, B«B©ifiJffl#ilSB100Brt 
<0^fSJI§§102B*5 < J:rj t ^Wfg104B«rffl^T@^O«ffi 
Bxiji:AO»BByAj (J = 1. •. n) *>6^J 
MKb.a^, 
. [006 4] 

[®80] KB.A = n|exp(yAj : xbj) (mod p) I j = SO 


(11) 


8-2 5 115 6 


a2GZ s.t 0<a2<p2, 


[0080] 

[Sfc88] *ya=exp(ai : xi) (mod pi) . 

h7-*0flJE#A(**>*£g#<DI DffiSl a 
0 : Z/(pi) x Z/(p2). 
££|HlS3?®«:£fr"r (n = pi p2) o CCT\ xlif 

To 
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*ug*tft8 k £ *si k a . b vnmt t fcug^t* c 

2^\ 

[00 7 0] 

B&84] C2 = E(Ka.b ; k) . 

[00 7 1] Att, afflM108A*ffl^TCifcCf*B" 

[0 0 7 2] ©^-^*XO«.#ft 
Btti8&ftT*fcCifcCifc»LT* B <OfiJffl#ffl!lgB 
100B«c?JB^tS[H105B*fflt>T, St\ ^?iK 

B.A<fc?K 

[00 73] 

[&85] k = D (Kb, a ; C2) , 

kfcffi^T, 
[00 7 4] 

BS86] P = D(k ; CO , 

lex* *-fr*icpzmmt?Zo 

[0 0 7 5] (*«0»2) *«W2t?tt, -fe>*4>#«E 

So 

[0 0 7 61 (DM 

-t>*tt-fe>*««E«2b0rtOJ|{R»*»20K HC*6ffi£ 
«a20243j:tf»IHB204*fflU^T^O1ll«*fftf-rSo 

[0 0 7 7] £MMR: 

•pi; ^S. 

• p2 = 2 qi q2 + 1 ; 

vaiez s.t 0<ai<pi, fro. aittZ/Cpi) *0 

fro, aifc*Z/(pi) 7? 


20 


20 


*y h7-*O#3pJffl#AttfiJffl#«Kli100rt(0aa 
•«4»101*J:tf^*JliJIS102*fflt^T*O«*ffi«'r 

[0 0 7 8] SffiS: 
[0 0 7 9] 

[S87] - xi6Z s.t 0<XJ<pi-l. 


**§STSo . . 

[0 0 8 1] -fey*«*ll200rt©iBffliflF 
fi£g«203£ffl^T, 
[0 0 8 2] 

[&89]ed = l (mod l.c.d(qi-l. q2-l)), 
43-e. d€=Z*ffc«U #Jffi#AOI DflHBIalcW 

[008 3] 

[&90] s a =exp( n : e) (mod p2- 1 ) , 
«H*LT, sa*WJB«AK:SteK:WW'*. 
[0 0 8 4] COi:^ 
[0 0 8 5] 
[&91] 

sa^Sp if I a ^ I P GA = Z/(p2- 1) , 
[0 0 8 6] 

*y h7-£<0f<Jffl^AJ;J\ ^*h/l/ (yi, v'a)* 
[008 7] 

[IW2] vA=exp(a2 : si) (mod p2> . 

S^r^tl^nE (K ; M) , D(K ; M) T+mt>?o 
[0 0 8 8] *vh7-*©flffl#A, BJCOV>T> A 
ttBfc»LT«?*-rt>*aDfct\i C<D@ft<DTT\ 
A, BH:*©**!**^*. 

A8AOfiJffl#fllttB100ArtO^*«ll»1C)2Afci«IW 
1O4Afc^^>aMHg106A*^T* A<D«S&« 
(xa. sa) tBO^Paa (yB. vb) .fr&T***K 
A;B^\ 
[008 9] 

0&93] KA.B = g(0(exp(yB : xA)(mod pi), exp 
( vb : s a) (mod p2))) . 

fcTfWTSo B(iBcOf«Jffl#ffi!lSS100Brtco 
^t«gg102Bfcig*S104Bi:>N^^aftacgg106B*ffl 
l^t\ B©HS!E8 (xb, sB)'kA04iBBK (yA, 

va) fr6VX£«KB.A* v 

[009 0] 

[ft94] KB.A = g (0(exp(yA : xb) (mod pi) , exp 
(va : sb) (mod p2))) . 

[009 1] 
It [&95] 

Z/(n) ( (x, x) -» x) , 

[0 0 9 2] COtt> W6>fr£* Ka.b = Kb.a, frfig 

irfSo 

50 [0093] ss'ic. Attw^^-^asffl-r***^ 
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#ftl«H100Art<?>a*«»i03At i 0«K ( A) *flFJ« 
U BSa#{k8«105A*ffll^T«K(A) fccfcO'S*** 
*ftLfcC(A).-E(K(A) ;Sa), *\ **yi07A 

^>J107A^I21i*nTW^^*SI*ffi5o 
[009 4]®* -;l/*X<0B8^fl: 

a», 5pjffl#ffli«aiooArtoaa^sioiA%fflv>Ta 

ttr.*«f, r*AafcLT«^8103A^6x-*B& 
*{fc«k*fls#r* 0 ^-;l/«P*Wtt«fHSIIi05A 
^v^T^-^WHWHi k J: 0 MftUWiCi 

Ci = E(k ; P) , ICTft&tZo *5fc* *a» 
ft^l105A^fflV^T-r-^B|#{bSk^vX^^KA.B 
*«#fkLfcB»*Ci*, C2 = E(Ka.b ; k) . £T 

[0 0 9 5] At*. jMSBIOBAftJS^TCi k-Ci*B 

[0 0 9 6] ®p«-;i/*Xoa^fc 

100Brt(DBia#ftaEH105B«rfflV^T. Sf\ VX^IK 
B.AckO. k = D(KB.A ; Cz) , £T-r--#Hglf{tMk 
£M^{fcU X- * W^ffcM k ^ffl^T, P = D 

(k ; co . lex, *-)i*jcpitmmttZo 
t o o 9 7 ] mmm 3 ) %mm 3 mm 2 

va) **««2i:ttJI»*WOk«KJ:0ft«r*- 
[0 0 9 8] <X>*P<I 

•tr>^{i-fe> ; ^MISa200rt£D^a^§g20K H&ffi£ 
[0 0 9 9] &HI1IM8:- 

• p 1 ; Xft, 

• p2 = 2 qi q2+ 1 ; X&. 

• aiez s.t 0<ai<pu rtO* aiHZ/(pi) '7 

• a2€Z s.t 0<a2<p2. fro, aittZ/(pi) V 

mm': 

• q 1 , q 2 € Z I 

*yh7-*O#fUffl#AttfiJffl#«SW100rtoaft 
§0 

[0 1 0-0] BOB: 
[0 10 1] 


(12) ^¥8-25 1156 

B&96] • xaeZ s.t 0<xa<pi-l. 

&MM : ■ 
[0 102] 

[R97] «ya=exp(ai : xa) (mod pi) . 

A I D1WU a 

[0 10 3] *>*(4t>*tt»B200fl<D««Ba^jac 
8H203*fflv^ flJffl#AO I DlSffl I a fc»l/t\ 
10 (1) I a -hi a (mod p2-l) tt¥£#J£. 

(2) la + ia (mod pi-r 1 ) * I ',» + i ? (mod 
pt- 1) if A*p. 

[0 10 4] 
[»98] 

sa =exp(I a + i a) : 1/2) (mod p2-l) 
£ft»LT, s a «*JJB# A lc££teE*T*« 
[0 10 5] C(Ott, BISfrfc* si.^s/ if A 

20 [0 1 0 6](3)^^M 

*»y h7-*Ofilffl#Att, (ya f va) £ 
A04JH«i:LT3Mi*fTft5 0 fc«U va=exp(a 
2 :sa) Onod pj) . 

nfcaffl#«8fk!i00rt»cttHI--OiB«ai«f#3R7;i/=f 
yXA*rt«Lfc«*^fl«iiio5#*o. co*as$i . 

WMBJ:tfll%L*aMM6*ti*nB (K : M) . D 
(K ; M) T*mt>to 

[0 10 7] H7-*OfiJffi#A. BfcOVvC, A 

A, Btt*0#«*«fft* • 
AttA©f»Jffl#W«B100ArtO^**»«102Af:i(lIia 
104Ak/Ny^attIWl66A*fflt^ A<0*£ffi8l 

(xa, ») kBOft«l"(yi, vb) fr6^«K 
a.b£\ 

[0 10 8] 

[&99] KA.B = g(0(exp(yB : xa) (mod pi) , exp 
(vb : sa) (mod p2))) , 

40 ^t^gC§gl02Bi:iaS[igl04Bt/Ny^aH-gCS106B«:ffl 
v>t; B^ffifiBB (xb. sb) bMDtoQM (yA. 
va) A^VX^SKb.a^ 
[0 109] 

B&100] Kb. a = g (0 (exp(y a xb) (mod pr) . ex 
p(va : sb) (mod p2))) . 

[0 110] 
[»101] 
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0 : Z/(pi) xz/(p2) 
ftSBlS^ft**^^ (n = pip2) o £CT\ x(i* 

To' 

[Oi l 1] COfcSN Ka.b = Kb.a, WIS, 

' 31T*. 

[o 1 1 2] se>*c, Att*?>«-;i/*asffliT«.«ftw 

7X»0«*Sji, Sfcte, AOfMflNlxAfr&Wl 
#iW»00ArtO«4J«»03AlCit)«K(A) fcffe* 
U Bg^ffcgfi105A£ffl^T8K(A) fc*DSA*« 
*§{fcbfcC(A) = E(K(A) ; Sa) f «\ **yi07A 
KE«T*o-tt»o«?^-;Wifflfc:*^t. 

«fcffl*<04iBII«^6^X*«*ftj«TS<i-i:ft<, * 
^U107AK:Ett*nTt s *TX*«*ffi5 o - 
[0 113] ®^-;i**on»fl: 
Att, PJffl#ffll«fi100Artoaaii*S101A«:ffll^Ta 

*fl*k*fWtT*. ^-;l/«P*B«WdKW05A 

wb^t * e^fta ktcj: t> iw t fcure* c i 

Ci = E(k ; P) . ICTfl?*T8 0 «6K, Bg«# 
ftSBIOSA^fflU^Tx-^^fbSik^vX^SlKA. b 
T?«^{ttft«#*Ci*. C2 = E(Ka,b ; k), ICT 
ffr£T5o 

[0 114] Att, SfflSEBHWAS^vCCifcCaSB 

[0 115] Qt-w&omft 

B«3S'6tlT*feCii:C2K:»LT, B C0fijffl#ffl!lgg 
100BrtOBM«t«B105B*fflV>T, *f\ VX^IK 
e.AcfcO, k = D (Kb, a ; C2) , KTr-^fiiHfffc&k 
*8»{fcU SlCf^WWMkfcJB^T; P = D 
(k ; CO . kt, y-;i/*XP*««ffcT*. 

[0 116] (SffiSM) ^S£«RJ4«. £ffiffl2. 3fc 
*^T-b>**ffiaT*«ffl#AOfc»<OflM (sj, 
'va)6«W2, 3i:tt*a*M0B*fc*9ttrtT 

5— B*4**o' 

[0 1 1 7] <d*p<i 

«»202fi*tf»ll»204*fflt>T»Ol«B*flF*T* o 
[0 118] £M1HR: 
•pi; $£c, 

• p2 ; jRft. 

• aiSZ s.t 0<ai<pu fro, aittZ/(pi) V 

mm, 

•-ai€Z s.t 0<a2<p2, fro, aittZ/(pi) T?" 

• z/(p«-i) 07c*w*f"T*aHe«*^77i/jyx. 


24 


Z/(n) ( (x f x) x) , 

■b > * OfMBfll fflTfe 5 B(MW»7;lcr y XJLlc <fc 

^nEo(k;M). Do(k;M) T*£t>?o 
[0-119]*? hy-^tD^fijffl#A{i?iJffl€ffljaH 

OB*fWT*. 
[0 12 0] IBffitt: . 
70 [0 12 1] 

[&102] *xi£Z s.t 0<xa<pi-l. 

fiBB: 
[0122] 

[&103] • y x =exp(ai : x a) (rood pi) . 

h7-^<0fiJffl#Afi-fe>^k:e»o i DISS I a 

[0 1 2 3] *>*«»'B200rtOiBMflF 
j«BB203*JB^T* fUB*A4) I Dlf« I a ICfcfL 

[0 12 4] 

DR104] sa =Eo(r ; I a) ez/(p2- 1) , 
MWLT, sa*«ffl*AfcS±teE*T*« 

[0 12 5] COi:*, 

[0 12 6] 
• DR105] 

sx^sn if I 1* I f»eA = Z/(p2-l) , 
■#j*fiT*cfclc-ffiBTa 0 ". 
[0 1 2 7] <3>^*#«4>#ff 

AO^H«fcLT»»«rff45o fcfSU va=exp(a 
2 : sa) (mod pi) . *^K7->lc»JK 

«***ro*ftLfe«»**n*nE<K ; m) , d 
(k ; m) '-eSteTo 

[0 1 2 8] *y h7— *0?Uffi#A. B«COV*T % A 

40 A. B«43fcO#il**ffT* 

AttA©fBffl«««B100ArtO^*«»B102A.4:aBiB 

(xa. sa) £B4>fiBB (yB t vb) fr&^X^glK 

A.b£\ 

[0 129] 

[&106] KA.B = g(0(exp(yB : xa) (rood pi) , ex 
p(vb : sa) (mod p2) ) ) 

, fcTttrtT*. BWICB«BO?iJffl#BilEB100Brt 
<D"< * ft*gg 1 02B £ iggggl 04B £ /> y $/ a ft KS'i 06B^: 
50 ffit^T* .BOSHBB (xb v> sb) fcAO^BBB (y*. 
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VA) fre>T**gKB.A?\ 

[0 13 0] 

[&107] KB.A = g (0(exp(yA : xb) (mod pi) , ex 
p(va : sb) (mod p2))) . 

<t> .: Z/(pt) xz/(p2) -» 
ft*EIS?¥«*fi*>'*" (n = pip2) o CCT\ x(i^ 

f c 

[0 13 2] CCD^^x WbMC Ka.b = Kb.a, Wl£ 

[0133] *sk* Att«?^-;i/*as<rr*«fw 

vX^S|co*^Sa, Sfctt, AO»Wfll«xAfr&fUffl 

#(||^«100ArtcDS^j3c§§103AtC<fct)SIK(A) 

U ««^fc«B105A*jg^T«K(A) lC«fcOSA*Bg 

^tLfcC(A) — E (K(A) : Sa) . **yi07A 

• »J 1 07Afc£tt«ttT l> S 9 o 

[0 13 4] ©y-;i/*ioW*fb 

A**, affl#«B*BiooArtoa»**»ioiA*ffli>ra 

»r*Stt r*A*kl>T«fi«88103A*6r-*« 

Ci = E(k ; P) , KTfMW*. *Sfc.-»fl» 
{t«Bl(»A*fflV>Tr->«9<t«ik*v^^«KA.B 
T?W#<bbfcB9*C2*, C2 = E(Ka.b ; k); £T 

[0 1 3 5] .A HE, ilfiSei08A^fflV^TCi tCiZB 

[0 13 6] "®>«-;i/*S:o*^fk 
BttfassnrtftCifcCfKWLTv Bosi/BSffKH 

100Brt<O»*^ft:*1110SB««V^Tv £?\ VX*«K 

b.a^o. k=D(Ke.A ; co . icr^-zmmmk 
*a»{tu xtcT-fnmtMk&m^T* p=d 

(k ; d) . tcr, *-*tt-P*«ffc«. 
[0137] (£tfi0y 5 ) gftffll 5 Bgflffll 2 

[0 13 8] <D*MI 

■b>*tt'fe>*««ll-200rtOil5ft«i£»20U 
^S202i3^lf^S204*ffl^T^cOlf«*f^filc-rSo 
[0 13 9] fidtti: 

• p.; fgfi. 

• n = q • q \ 

• a€Z s.t 0<a<p. fro, attZ/(.p) "CiBttfi 

a 


2tf 


[0 13 1] 
* DK10B] 
Z/(n) ( (x, x) -> x) , ■• 

•q, q'GZ ;Xft s.t q-l=2 { i {2, q'-l 

= 2 TJ1 TJ2 (f I, f 2, TJ 1 , T]2;3£$0, 

• aeZ s.t attZ/<q) , " Z/(q , ).."eiR»«. 

So 

[0 14 0]$$®: 
[0 14 1] 

B&109] •xieZi:tO<ia<p-l. 


[0142] 

K&110] - yA=exp(a : xx) (mod p) . 

* y. h 7 - * <Oftffi# A (*fc>* ta»(OID«»'I.a 
20 fcS&TSo 

[0 14 3] *>*tt^>^«««200rtoaMB«ffJ« 
8B203*ffiV>T\ ed^l (mod M) , ^e, 
fftSU 5flJJB#A<DI DfSfBI AJciWLT, s a =exp 
(I i : e) (mod N) , 

[0 14 4] 

[£111] vi=exp(a : s*) (mod n) . 
*ft/»LT, (si, vA).*Mffl#AU:fi±u:EWr 
So fc/fU M« : l.c.d(ft-1. f 2 — 1 . 7)1-1. 
T/2-1), N = l.c.d(q-1, q'-l)o 
30 [0 14 5] £<D£Z\ 

[0 14 6] 

[&112] s^s^ and va*v^ if 1 x ■ * I ii 
GA = Z/(N) . 

[0 l 4 7] O^x^SiO^ 
*y h7~*0?!lffl#Afck (y*. vi)^ 

[0 1 *yh7--*K:*«Stlft»fli# 

«9ffcbfcls***nt f ttE<K : m) d(k ; m) v 
m.t> -To 

[0 1 4 9] h7-.*03pJffl«A. BJCOl>T, A 

a, Bttjfco^jBSjWf-r*. 

A « A O=PJffl#ffll^B100ArtO'<#*SS102Ai:iSfi[S 
KMA^M^^aH-SgilOeA^ffl^T, ACOSffiS 
(xa, sa) fcBDfiMI (yB. vb) *^-7X^^K 
50 a, b^:. 
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(15) 
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27 


28 


xa) (mod p) . exp 


[0 15 03 

[ail 3] KA.B=g(0(exp(ye 
(vb : sa) (rood n) ) ) , 

ICffWH"*. HMfc. BttB©fiJffl#ffl|Jg@100Brt© 
SWH102B t «»S104B t^>>- ->a lf»§g106B^ffl 
V>T, (xb, sb) fcAO^Ha (yA, 

va) A^VX^gKB.A*, * 

0 : Z/(p) xz/(n) -* Z/(m) 
*Sl^lS?««rS*3-r (m=pn) . CC?, xtt*ft 

■To 

CO 1 5 33 C(Dt%, WSjWC* Ka.b=Kb.a. tffig 

co 1 5 43 see, A»*?^-;i/*2s«-rs«^*' 

£f>:flJf8#»COl,>Ttt, **l6©#Jffl#i:Ai<OI!S<0£ 
TX*8©££Sa, £fc«, AOffiffi1f«XA^P.fiJffl 
#««H10QArt©«£j3ffl1O3AK*DaK(A) *f&* 
L, Bg«<f(fcSH105A*;i!^T8K (A) £<k 0 Sa*© 
#{tbfcC(A) =E(K(A) ; Sa) , £\ **U107A 

■fc«#©aiii«*&^;**«*fl*r*cj:fc<. y 
Co 1 5 53 ®^-^*x©Bi^t 

Sr*Itf> r*A££LTli3y£§g103Afre>7 i -*Bg 
^{t3ik*fN!c-f5o ^-^**P«rW«^bK«105A 
£fflV>T-f-*B&#{tfi k C «fc 0 Wifl: LrcHg^i C i 

ci=E(k p) . KTmsfSo Bg«# 50 

(tSE105A%fflV>Tr-^W#fUlk*v7.^aKA.8 
T'VSmtltcBSmCCzZ. C2 = E (Ka.b ; k), iCT 
ffr£f-5e Bfa#fbgg105A«rfflV>T7 r -^BS 

k *•? x ?m k a. b ■«» it l fcBf^js: c 2 c 

2= E (Ka.b I k) . KTff)St5 0 
C0 1 5 63 A«U ii€SB108A*ffll,>TCii:C2«-B 

CO 1 5 73 <S>p< — /U*3t<0«^ft 

B«jge.nTtfcCt fcC2»CttLT, BO?iJffl#ffl!lgB 
100Brt©B§a^fkgfi105B«rffl^T, ff, ^X^SK 40 
b.aJ:?K k = D (Kb. a ; C2) , CTT-*fl»ft:»k 
*««tftU #fcT-*«*tfl:«k*fiit , >T, P = D 

(k ; c.) . tcr. *-;u*3S:P*«*t<tf 5. 
CO 1 5 83 (««0I6) *Mm&it&m*a83B6. . . 
Z'2b *) , a <Dm®&K * % Z 1 £ * K> ££t$£ £ 5 C 

CO 1 5 93 ®W 

■t>^a-tr>^ffl!iSfi2oort©^a^ii2ou gc*aig£ 

(£§§202*5 J: tmg^204£ffl^T#©1t*B£{ft£-f 5 . 
fc£U Hftf ttlHMIffri»II203rtlc«HS*nTI/^ 50 


xb) (mod p) , exp 


* CO 1 5 13 

Cai143 KB.A = g(4>(exp(yA 

(va : sb) (mod n) ) ) . 

ns/vyi/agea^sfcu 0 a. 

CO 1 5 23 


x) 


cans] 

( (x, x) 

CO 1 6 03 : 

• p ; ffta. 

•n = q-q*. 

• a£Z s.t 0<a<p> attZ/(p) T?IS&& 

• q, q'ez s.t q- 1 = 2 f i f 2. q'-l 

= 2ljll)2(^1, f2. 7)1, T)2.^S), 

• a€Z s.t a(iZ/(q) , Z/(q') TBttMS.. 

^aioift*tf^**»«io2*fflv^r*o««^j«i- 
So 

[0 16 1]»f&8: 
[0 16 2] 

DR116] • xiSZ s.t 0<xi<p-l. 


xa) (mod p) 


[0 163] 

B&117] • yA=exp(a 

c-o 1 6.4] *>ziz*>zw&m2ooft<DmBmwi$. 

SM2Q3*flJ^T* #Jffl# A CD I Dlfffl I a {CULT. 

(1) Ii + iJ (mod N) tt*F**feft. 

(2) I a + i a (mod N) * I n + i m (mod N) 
if A*m> 

fcft«£*'K:jEHkI A*3fl\ 
[0 16 5] 

[&118] s a =exp(I a +.i a :i/2) (mod N) . 
v a =exp(a : s a ) (mod n) , 
*ItJ|LT\ (sa, va) *¥iJE#AlC££tcE*)rf 
§0 

[0 16 6] C^fct* ej§5>frt£> sa*s„-, v a * 
v ji if A fi. tf!&±LT2>o 
[0 16 7] 

*y h7-*OWffl#Att,-^h;l/ (yi. va)* 
A Offlii: LT^S^tT^: ^ 0 
[0 16 8] *^h7-*K«RSnfcfyffl# 
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(16) 


-251156 


29 


30 


M^ftL^S^^-n^tiE (K ; m) . d(k ; m) t? 

[0 1 69] h7-*<0f'Jffl#A, BfcO^T, A 
A, BirAO^MZMfitZ 

A (4 A «ftJffl*fmBl00Art®*tJltJIHia2A t ««tf§ 
104Ai:^7^a.it*S106A%fflV>T, AOS»a 

(xa. S a) tBo^esa (yB, vb) fre>vx*«K 

a.b*\ ^0 
[0 17 0] 

[&119] KA.e = g (<p (exp(yB : xa) (mod p) , exp* 

0 : Z/(p) xz/(n) -» Z/(m) 
&5P?lS¥fS!*£irt (m=pn) . x«*n 

To 

[0 1 7 3] COtt, W5.^1Cx Ka.b = Kb.a. jW£ 

[0174] sec. Atta?^-;i/*jS«-rs8^^ 

■7X^8©^Sa. Sfctt. A©«S;1f«XA^e.?iJffl 
#ffl!lSai00Art©S4fiES103Afc:J:t)SIK(A) fcffrS 
U ®M^{kSB105A«:ffll>T8lK (A) 9 Sa«tB| 
#{fcLfcC(A) =E(K(A) ; Sa) . **D107A 


) 


*(vb : sa) Onod n) ) 
fcTfMWS. ffifflZ. BttB©fiJffl#fflIJIB100BrtO 

l^T. .i^Oinm (xb. sb) fcA©&BB« (yA. 
va) *>e^X^HKB.A%; 
[0 17 1] 

[&120] K b . a = g ( <p (exp ( y a : xb) (mod p) , exp 
(va : sb) (rood n) ) ) , . 


x) 


[0175] 

A «\ fiJffl^«BtHlOQArtOSSUR5Kfe»10iA*fflviTa 
&r*ltf, r£ArttLT8£fi!ctS103Afr5-r-*Bg 

saju p*wa»flaMipsA 
Ci = e (k ; p) , tcrms-f^o egg 
*.»-CTI^fl:Lft«**ei*, C2 = e(Ka.b ; k), ic 

T^fi?-rS. Bgja#{t8Bl05A*ffl^T-f-* 

Hg^fta k *-7x *s k a :. b r-sgmt l t&mt c 2 *\ 

C2=E (Ka.b ; k) , KTftfiEf So 
[0 1 7 6] Atts ji^gl08A*ffl^TCi tC2*B 

ICjUSo 

[0 17 7] ©*-;i/**©aWfl: 
Bfii^nTtfcCi £C2lC*tbT, B<DfUffl£§JgB 
100BF»9<OBg«^{tgBl05B*ffl^T, ST> VX^SIK 
b.aJ:.»); k = D (Kb. a ; C2) , iCTx-^^f^bSlk 
*t«ft:U *C7*^**^flJlk*ffll/^T, P = D 
(k : C.) . 1CT, *-;i>*£P£ig*f{t-fSo 

[oi78] ( mm 7 ) mmm 7 tin^ 4 ©&sms 


JO 


[0 17 2] 
[®121] 

( (x, x) 

[0 1 7 9] ©IPM 

■bV^«-b>^ffl!lSB200rtcD^|S^SI20K 
BE8§202fe<J:tf^gl§204«rfflV>T^©1f««:^-r5o 
[0 18 0] £NHMl: 

• p : ^S. 

• n = q -q' (q, q' : ^$0 . 

• a ez s.t 0<a<p v a«Z/(p)T-HSS 

«. 

fMHMB: 

• Z/(N) ©7C*ffi^-r5fi!S58IB|^7;l'=rUXAfc<J: 
(fir, 

• oez s.t ottZ/(q) , Z/(q\) Tig&iffi. 
uCT*, N = l.c.d(q-1. q'-l) fTSo $fc, 
-b >^©«SB1f ffiT*fe5«®aag#77l/=f U XAK * 

•3, ¥XM*SikT*Bi^{t:fe < to : ^t:Lf=^*^n 

^nEo(k ; M) , Do(k : M) ?&t>to 

[o i8i]^y v'y—xommmxmmmm&m. 
io<w©aftR£»i 01 xs^fmm 02*e v>t# 

[0182] mmm- 

[0 1 8 3] 

[Stl22] • x x G Z s. t 0 < x a < p - 1 . 


[0 18 4] 

[&123] • y a =exp(a : x x ) (rood p) . 

h7-*OflJffl#A«;feV*Cga<D I D«« I a 
*mm So 

[0 18 5] -t>^(i-fe>'^fflJSB200F , gco«ffia^fiK 
gfi203*ffl^T, *iJffl#A© 1 DlffS I a !C?!ftT, 
[0 18 6] 

[3S124] S A = Eo(r ; Ia) GZ/(N) . 
vA=exp(cr:sA) (mod N) , 

muhr. (sa, va) «NJM-iicftfticB*r 

So 

50 [0 18 7] si*sp and vi*v» i 


(17) ^¥8-2 5 1156 

31 32 

f ii*i»eA=z/(N), tffigs-rsctKasc-r . * (xa. sa) tB^mia (ys. vb) a>e-rx*&K 

s ' A.B«\ 


[0 18 8] ©V**«'©«* 

[0189] *e>ic; *-y hu-tic&ffiztircmmg 

=f y XAfcffl^T^MfcSi K TflHtfl: L fci^Sfe J: If 

«<f ftLfeeSfc^n^ttE (K ; m) , dck ;m) t*. io 

[0 19 0] *v b7-^OfiJffl#A, BtOV>Tv A 
ttBCttLTB^-^fcjg!)*:^. £©@«<DTT% 
A. Btt^©#«l*llff-r5 

A ti A©f)Jffl#fi!lSB100Art©^f «HS102AfcaSS 
1O4Ai:>'N>y5/affS8§106A€:ffll,>T, k<DW®m. * 

0 : Z/(p) xz/(n) Z/(m) 
*-5i^S?«*St)-r (m=pn) . CCT\ xfi-ttt 

to 20 
[0 19 4] £(DtZ. WefrK, Ka.b = Kb.a, 

its. 

[0195] Aim^t-nzmm-rzmstf 
vx^aom-a-s*, sfctt, A<D*ggEit$BxAfre>#jffl 

#<||gB1<X>Art©SI£j£gg103AK«}:D&K(A) 
U Hf«^ft;gB105A«:ffl^TgK(A) £ «fc t) S a 
^fkUfcC(A) =E(K(A) ; Sa) . «\ y*>J107A . 

«4:ffl*04»ll«*»6^X*«*f|sj«"r*ci:'4<. ^ 
^J107AKiB®;£nTl->*-?X*8£{£'5. 
[0 19 6] ®*-/l43tt)Bg3ft: 

$Lt1tmTS, r«rA^ttT@4fi£§gl03A^e.-r-^B| 

Ci = E (k ; P) . KTffrSfSc B§« 
^{fcgB105A£fflt^TT-*IE^<t&k*;7X£giK 40 
A.B.TW#<kLftW#XC2«r, Cj = E(Ka.b ; k), 

rfwr*. . . 

[0 19 7] Att, afflBB108A*ffiCvrCi4:Ci*B 

[0198] ®^-^**oa#(t 

BlS&£>ftTtfcCi tC2tcWLT. B<0fiJffl#ffil«H 
l"O0Brt©Ba#fl:«IB1O5BSrfflV>T. $1\ vx?iK 
b.a£^ k = D (Kb. a ; C2) , .fcTr-*«H§flJI k 
fcflWffcU *K^-*<»flJlk4ErJB^T, P = D 
(k ; CO . KT, PfcflWffcTSo . 50 


[0 19 1] 

[$125] K a . b = g ( <f> (exp ( y b : xa) (mod p) , exp 
(vb : sa) (mod n) ) ) , 

^T, &ft<DW&m (xb, sb) tAWm®. (yA, 
va) fr&7*£ftKi..A*« 
[0 19 2] 

[&126] K b . a — g (0 (exp ( y a : xb) (mod p) , exp 
(va : sb) (mod n) ) ) . 

[0 19 3] 
[3&127] 

( (x. x) -» x) . 
[0 19 9] (XttHS) *3Bfl9l**6*S5«7K:*^ 

[0200] 

Att, 5pJffl#ffll«B100Art<OSLKKftS101A%fflV>Ta 

<*ft«k*ftj«-r*. .^-;v**p*i«a«fi««io5A 

* % Ci = E (k : P) . fciTfttfrSo jft* 
g^ffl^Tx-^e^^k^^^aKA.BO^flfiW 
Slfil^, C2=k*KA.B. 'KTlMt-TS. 
[0 20 1] A fiiifIgB108A*ffl^T C 1 1 C 2 £ B IC 

[0202] ■• *-;v**<o*#{t: 
Bttsssnr* feci tC2tc«br, sr, «w»io4b 

ctfcio^-MWfbikttiwtr*. T£fcis> 

k = C2*KA.B. JfclC, Wtt^ffcKBIOSBSfflt^T^- 
*»*fbikfr&, P = D(k ; Ct) , KIT*-/!/** 

p*a»ftr*. 

[0 2 0 3] (*S£ 0J 9 ) ^ifigffl 2 £$1K0!1 

>«««cfet^T, a a a <Dmm^mmmm<D^ 

*||»102Afc»»«104AfcMy^a|tJI»106A«rfflV> 
T> AO«fSSI (xa, sa) £B<0i«MI (yB, vb) 

[0 2 0 4] 

t»128] Ka. b = g ( (exp(yB : xa) (mod p) ) * (ex 
p(vb : sa) (mod n). ) ) , 

fcTf&KfSo W*K, B(iBOfiJffl^ffl!l^Bl00BrtiD 
^t«»B102Bfc»W»104B£>vy ^aft»«8106B«rffl 

^t, i«yotnm (xb, sb) tAv^rnm (yA, 

va) ^6^*BKb.a«t, 
[0 2 0 5] 
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(18) 


8-25 11 56 


33 

[&129] Kb. a= g ( (exp(y*: xb) (mod p) ) * (ex 
p(v* : S8) (mod n) ) ) , 

nsM-^^^p^sbu x*y«x tyvmmm 

[0206] ($mm 1 0) *«y V7-t<D&$mWt 
it- Ym*mft U S^-^iKIuffca*- K400£ 
?"Jffl#<IISg500rt©A-HW®gS50Hcatii*, n 

«sf j i e-nssffii 9 tfev>T> fijffl#iissioortoa 

&8£8g101, ^t*»fg102, 8£fi!tgg103, «W8§10 
4, ««#{fc£B105, /vy*aU-S8106, **U107* 
fflV^TfT^afflS^r^tl^n*- F400rt©gl&f8£g§4 
OK ^t«»S402, St£f£fg403, «Sfg404, 

S«#'\<02&flbi:tt*- K400rt©tB2)gH408£ 

a? ft, fijffl#fflygil500rt©i§ffigfi502£ffl^ 
TiilllHl8300*/»- L'rsm-r 5. 
[0 2 0 7] 

raw©**] *%wfcj3it5e?^-;i/Bi^b^ffiK 


[■BOWILftHIl] 

[0 1 ] *mi®%i&WK$sif&u7>7-i*mi&%tF.r7 

[@2] *^«os^^^;W#ft^i*<o«tfe*^-ri» 
w mm. 

m 3 ] nmm i * & 9 iJiiartowiiBii* 
[04] mmm i *>e 9<D->x7^«fiErt<D*>*<iis 

BrtgP18J5)c£jiVf7n 9 *0 O 
[05] USSflll 0O^XrA««rt<DA-HrtSP«BE 

[06] Xttftl OOi/^^^fiErtOfJffl^liSBrt 


20 


100- 
101- 
102- 
103- 
104- 
105- 
106- 
107- 
108- 
200- 


mm. 

•«ffl#«l«lI100rt<DgLitt*^S* 
■'■fy/B#B*Bl00rt©^«RJIH» 

•=pjffl#{iyseioort©s^fig8g, 

-?Uffl#<iai£HlO0rt©8gfg, 
•?Jffl#ffl!lSHl00rt©BtS^{tg«, 
•ffJffl#(iiaS100rt ©>» ^ y %> ^ tw«, 
■«JB#«KBioort©>«*-u, 
•fiJffl#ffl!l&fiioort<DjmgB* 


50 


(200) 


[02] 
B 2 

ae#A (too) 






; ^ 



[03] 
B 3 


«(5#B (100) 10 i N 


103^ I I ^ _ 


— i~ 


Bfl^fcBB 


.102 
,104 
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(19) 
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